Baicloud-Cms Project: Security Vulnerabilities
BaiCloud-cms v2.5.7 was discovered to contain multiple SQL injection vulnerabilities via the tongji and baidu_map parameters in /user/ztconfig.php.
CVSS Score
8.8
EPSS Score
0.002
Published
2022-02-19
BaiCloud-cms v2.5.7 is affected by an arbitrary file deletion vulnerability, which allows an attacker to delete arbitrary files on the server through /user/ppsave.php.
CVSS Score
9.1
EPSS Score
0.003
Published
2021-09-30